Privacy Policy

Last updated: 1 January 2026

Lysbue Galleri AS ("we", "us", "our"), registered at Tordenskiolds gate 6, 0160 Oslo, Norway (Org. No. NO 921 456 778 MVA), is the data controller responsible for your personal data collected through lysbuegalleri.no. This policy explains how we collect, use, store and protect your information in compliance with the EU General Data Protection Regulation (GDPR) and, where applicable, the California Consumer Privacy Act (CCPA).

1. Data We Collect

• Contact details you provide via our booking or contact forms: name, email address, phone number, and message content.
• Booking details: visit date, ticket type, quantity, and group size.
• Technical data: IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies.
• Payment information is processed by our third-party payment provider and is not stored on our servers.

2. How We Use Your Data

• To process and confirm ticket bookings and enquiries.
• To respond to customer service requests.
• To send booking confirmations and, where consented, marketing communications.
• To analyse website usage and improve our services (only with analytics consent).
• To comply with legal and accounting obligations under Norwegian law.

3. Legal Basis for Processing

We process personal data on the basis of contract performance (bookings), legitimate interest (site security and analytics), consent (marketing and non-essential cookies), and legal obligation (accounting records, retained for 5 years per the Norwegian Bookkeeping Act).

4. Cookies

We use strictly necessary cookies to operate the site, and, with your consent, analytics and marketing cookies. You can manage your preferences at any time via the cookie settings link in our footer or the consent banner. Preferences are stored in your browser's local storage.

5. Data Sharing

We do not sell personal data. We may share data with processors strictly for the purposes of running our business: our payment processor, email service provider, and hosting provider, each bound by data processing agreements. Data may be transferred outside the EEA only where appropriate safeguards (such as EU Standard Contractual Clauses) are in place.

6. Data Retention

Booking and contact data is retained for 3 years after your last interaction with us, unless a longer retention period is required by law (e.g. accounting records for 5 years).

7. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing based on legitimate interest or direct marketing. California residents have equivalent rights under the CCPA, including the right to know what data is collected and to request deletion. To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

8. Security

We implement appropriate technical and organisational measures, including TLS encryption in transit and access controls, to protect your data against unauthorised access, loss, or misuse.

9. Contact

Data Protection Contact: Lysbue Galleri AS, Tordenskiolds gate 6, 0160 Oslo, Norway. Email: [email protected]. Phone: +47 23 10 45 60.